Description
A missing permission check in Jenkins 2.567 and earlier, LTS 2.555.2 and earlier allows attackers with Item/Cancel permission, but lacking Item/Read permission, to cancel queue items they do not have permission to view.
Remediation
References
Related Vulnerabilities
WordPress Plugin Spotlight Social Feeds [Block, Shortcode, and Widget] Cross-Site Scripting (1.4.2)
Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-8980)
WordPress Plugin Google XML Sitemaps Cross-Site Scripting (4.0.9)
WordPress Plugin Acunetix WP Security Cross-Site Request Forgery (4.0.4)